CVE-2018-25278: Picajet Fx

Medium severity, CVSS 6.2. EPSS: 0.1% chance of exploitation in the next 30 days.

PicaJet FX 2.6.5 contains a denial of service vulnerability that allows local attackers to crash the application by submitting oversized input to registration fields. Attackers can paste a 6000-byte buffer into the Registration Name and Registration Key fields via the Help menu's Register PicaJet dialog to trigger an application crash.

Affected products

• Picajet Picajet Fx: version 2.6.5 only

Published 2026-04-26. Last modified 2026-06-17.